CVE-2022-29148

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Visual Studio Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftMicrosoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)>= 15.9.0, < 15.9.48

References

Timeline

Published
May 10, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-291497.8Open Management Infrastructure (OMI) Elevation of Privilege VulnerabilityCVE-2022-29158.8A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to cause Denial of ServiCVE-2022-291507.0Windows Cluster Shared Volume (CSV) Elevation of Privilege VulnerabilityCVE-2022-291517.0Windows Cluster Shared Volume (CSV) Elevation of Privilege VulnerabilityCVE-2022-291526.1The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the page.CVE-2022-291537.5HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allow server side request forgery when the Consul client agent fCVE-2022-291547.4An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of connecCVE-2022-291559.8In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, viCVE-2022-291567.8drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_release.CVE-2022-291587.5Apache OFBiz up to version 18.12.05 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles URLs provided by extCVE-2022-291594.3Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud. In versions prior to 1.4.8, 1.5.6, and 1.6.1, an authentiCVE-2022-291603.3Nextcloud Android is the Android client for Nextcloud, a self-hosted productivity platform. Prior to version 3.19.0, sensitive tokens, image
CVE-2022-29148: High severity, CVSS 7.8 | Vulnix